8b240f260031285e2e19f9aac13dafc1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b240f260031285e2e19f9aac13dafc1_JaffaCakes118
Size

57KB
MD5

8b240f260031285e2e19f9aac13dafc1
SHA1

9d40e6316fe064119b0a6d438c65b612c4cac867
SHA256

4ddd7efe21af8078f34294a2200a2add728407cb194cc2b476da4b45dfcd1fce
SHA512

677aad0dded2f494b9729b8eddaf6d6df608998daf39f9efc5f185819c52da5adb5ff92dfb7c69b79ab5ed80cec4b7a53dd53700c2d8dced8ce71f94f24431d7
SSDEEP

1536:GwlDy/TrnhhWR63KR2zLror+Js8J8FgYCq7hm47TnDH4J2d:Gwlm/Trhht3KQXroKJs8QLm474

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b240f260031285e2e19f9aac13dafc1_JaffaCakes118

Files

8b240f260031285e2e19f9aac13dafc1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

27ad630b06a266cde55361f43353fe6d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

ole32

CoCreateInstance

Sections

CODE
Size: 50KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE